30 matches found
CVE-2017-3219
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash...
CVE-2017-3219
CVE-2017-3219 affects Acronis True Image up to 2017 Build 8053, which performs software updates over HTTP with updates only verified by a server-provided MD5 hash. This design allows a potential attacker on the same network or able to influence traffic to cause the update process to execute arbit...
CVE-2014-8053
CVE-2014-8053 is rejected and not used; this entry does not represent an active vulnerability.
CVE-2016-8053
CVE-2016-8053 is rejected; this ID does not represent an active vulnerability entry.
CVE-2017-8053
CVE-2017-8053 concerns PoDoFo 0.9.5 and describes a denial-of-service via a crafted PDF that triggers infinite recursion and excessive stack usage in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp). The connected documents also reference PoDoFo-related updates and Debian/Ubuntu/Nessus/Op...
CVE-2015-8053
Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8052...
CVE-2015-8053
CVE-2015-8053 is an XSS vulnerability in Adobe ColdFusion, affecting ColdFusion 10 before Update 18 and ColdFusion 11 before Update 7. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. The issue is documented under APSB15-29; affected versions should apply the corr...